Properly sanitise displayed userid

This commit is contained in:
Cathy J. Fitzpatrick
2013-03-26 03:51:06 -07:00
parent 3ca9b1ba4a
commit a5e455f1c9

View File

@@ -46,7 +46,7 @@ function getGroup($username) {
function getLoginInformation() {
global $user;
return '<p>You are logged in as ' . $user['group'] . $user['userid'] . '.</p>';
return '<p>You are logged in as ' . $user['group'] . htmlentities($user['userid']) . '.</p>';
}
define('AUTH_NOASSERTION', 0);